Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132353a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3132353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          xaXpx9gV4/NwTMZIO+DbwIqMNCwi9WWSCaHw7OnoBiE=
Subject key identifier:   5A:F1:69:36:F5:D0:33:C5:84:13:25:86:89:CC:90:E3:58:EB:99:09
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       0DCE71677581064C9C3AF56A9C562E7CEEB0D804
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132353a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:55 +0000
ROA not before:           Mon 26 Sep 2022 07:56:55 +0000
ROA not after:            Mon 25 Sep 2023 08:01:55 +0000
asID:                     59282
IP address blocks:        2400:d680:125::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ce:71:67:75:81:06:4c:9c:3a:f5:6a:9c:56:2e:7c:ee:b0:d8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:55 2022 GMT
            Not After : Sep 25 08:01:55 2023 GMT
        Subject: CN=5AF16936F5D033C58413258689CC90E358EB9909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ba:7a:0e:c7:f7:26:1e:08:95:5f:ed:89:a5:
                    a7:c9:96:b1:7f:90:32:47:de:93:6e:88:f3:25:83:
                    2b:0b:10:28:bf:10:e6:46:28:6c:67:46:ad:bd:39:
                    d5:61:f4:dc:07:26:54:70:1c:49:3b:be:b7:f3:22:
                    db:e4:cd:26:e1:df:aa:4d:85:0c:41:ff:7a:f0:76:
                    31:bd:a4:87:15:13:74:91:48:04:4a:08:9d:71:5b:
                    7c:4c:f6:ce:70:16:81:eb:8a:bd:08:f6:d0:cf:a0:
                    8c:0a:48:b4:3a:74:6b:01:7d:2c:c6:dd:37:c6:5b:
                    8b:93:20:74:0a:ae:c2:46:52:c6:be:e4:fb:a1:98:
                    7b:70:4e:4a:aa:ad:8c:91:80:87:af:bd:11:92:e8:
                    a2:e8:db:05:cf:7c:b2:4e:70:91:26:98:97:e8:de:
                    c9:34:72:91:51:8f:83:7b:60:72:00:dd:ff:09:90:
                    24:9b:66:b2:e1:4d:41:a4:72:f8:eb:a7:7a:9d:d4:
                    a0:eb:d3:9e:77:d0:4c:13:2e:39:28:1b:22:35:31:
                    17:d9:5a:f8:4f:fc:34:ec:a1:19:ef:c1:4c:70:f4:
                    f6:b8:04:62:48:6a:8b:9e:f7:dd:6c:af:e8:00:7b:
                    ad:9f:9f:0e:92:50:ae:2a:51:26:85:de:32:93:a7:
                    d8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F1:69:36:F5:D0:33:C5:84:13:25:86:89:CC:90:E3:58:EB:99:09
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132353a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:125::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:2c:ea:04:0f:c0:bd:d8:6a:e4:15:16:19:67:23:9e:84:f8:
         6b:0d:b3:8a:dc:05:2f:8f:4a:23:89:0b:73:a5:37:00:bf:36:
         0f:ff:f4:61:a9:af:ad:de:44:20:49:f2:6f:81:86:5b:da:15:
         e4:77:2f:26:ca:bc:5f:54:1c:24:c0:f9:a5:31:2b:5f:a7:8d:
         47:01:22:6c:68:cf:d6:8c:89:de:bb:1f:3c:32:58:ae:8c:f5:
         95:e8:cc:b1:a1:5a:7a:6f:3e:70:19:46:68:ea:1a:12:3d:73:
         36:39:93:bc:e7:43:51:dc:ec:85:9c:e6:d1:3b:db:0d:a1:be:
         86:6d:81:9e:64:fe:37:a7:e4:3f:c9:85:1c:3a:6c:c4:bb:54:
         ee:79:cf:5f:fb:5d:08:bc:2b:c6:44:7c:37:08:1a:90:cb:1c:
         71:8f:c1:23:4f:57:d2:b2:85:23:84:4e:a0:ca:91:e9:c9:ce:
         5b:96:44:af:ec:a6:04:ac:a2:fb:bf:ec:56:62:00:bd:a4:bb:
         cf:38:a8:9e:db:22:69:e6:30:59:00:fa:9b:7b:5e:29:a2:74:
         89:f0:b9:42:14:9d:15:46:cf:6d:6a:b4:8a:a9:d7:56:ca:ff:
         6d:ff:3d:01:1c:00:c0:c4:b6:15:fa:f3:97:7a:95:54:6a:a0:
         ad:e9:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----